ROS-20261023-73-0203

The vulnerability in PHP is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261023-73-0204

The vulnerability in PHP is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261023-73-0202

The vulnerability in PHP is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261023-73-0205

The vulnerability in PHP is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261023-73-0206

The vulnerability in PHP is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0077

A vulnerability in the rdpeiserverhandlemessages function of the RDP client FreeRDP, related to the unconstrained allocation of resources, allows a malicious actor to trigger a service failure...

ROS-20261022-73-0052

The vulnerability in java-25-openjdk is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261022-73-0089

The vulnerability in the updateprocessglyphfragments function of the RDP client FreeRDP, related to reading bytes on the client side beyond the allowed range, allows an attacker to perform reading beyond the allocated memory buffer or trigger a service failure on the client side...

ROS-20261022-73-0097

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0068

The vulnerability of the go-git library is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...

ROS-20261022-73-0005

The vulnerability of the kerberosDecryptMessage function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information and cause denial-of-service attacks...

ROS-20261022-73-0079

Vulnerability in the httpresponserecvbody function of the RDP client FreeRDP, related to insufficient validation of input data, allows attackers to trigger a service failure on the client side...

ROS-20261022-73-0069

A vulnerability exists in the httpproxyconnect function, due to the introduction of a CONNECT request by the RDP client FreeRDP. This vulnerability is related to the introduction of HTTP proxy requests/headers in the proxy server, allowing an attacker to execute arbitrary requests...

ROS-20261022-73-0053

Vulnerability in the updatemessageWindowIcon function of the RDP client FreeRDP, related to memory usage after deallocation, allowing a hacker to trigger a service failure...

ROS-20261022-73-0049

Vulnerability in the function railmain.c:railserverhandlemessages of the RDP client FreeRDP, related to buffer overflow, allowing an attacker to trigger a service failure...

ROS-20261022-73-0037

The vulnerability of the software for collecting information about the status and performance of applications running on the OpenShift platform, OpenShift Telemeter, involves bypassing authentication through phising techniques. Exploiting this vulnerability can allow a malicious actor to gain...

ROS-20261022-73-0046

The vulnerability of the rabbitmq-c library is related to incorrect checks of buffer boundaries on 32-bit systems when processing BYTES fields. Exploiting this vulnerability allows an attacker, operating remotely through a compromised AMQP broker, to compromise the confidentiality and accessibili...

ROS-20261022-73-0048

The vulnerability of the rabbitmq-c library is related to a heap buffer overflow when using the API function amqpsendframe for serializing the AMQPFRAMEBODY frame with an excessively large size. Exploiting this vulnerability allows a remote attacker to compromise the integrity, confidentiality, a...

ROS-20261022-73-0032

The vulnerability in the mongo-c-driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0015

The vulnerability in freerdp3 is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261022-73-0095

The vulnerability in freerdp3 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20261022-73-0064

The vulnerability in Go-Git is related to incorrect behavior. Exploiting this vulnerability allows a remote attacker to bypass authentication procedures and perform cross-site scripting attacks...

ROS-20261022-73-0075

The vulnerability of the extension unit search mechanism for the UVC H.264 RDP client FreeRDP, related to memory reading beyond the allocated range, allows a perpetrator to access potentially confidential data...

ROS-20261022-73-0099

The vulnerability in libmongocrypt is related to insufficient neutralization of special elements in the query. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261022-73-0029

The vulnerability in freerdp3 is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20261022-73-0057

A vulnerability exists in the proxy server for asynchronous message updates for RAILWINDOWSTATEORDER and NOTIFYICONSTATEORDER in the RDP client FreeRDP. This vulnerability is related to memory usage after deallocation, allowing an attacker to trigger a service failure...

ROS-20261022-73-0025

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0056

The vulnerability in Go-Git is related to the incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20261022-73-0019

The vulnerability of the RDPDR IRP RDP-client FreeRDP module is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to read, write, and delete arbitrary files...

ROS-20261022-73-0013

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0081

Vulnerability in the updatemessagePolygonSC function of the RDP client FreeRDP, related to reading beyond the range, allows a malicious actor to read beyond the allocated buffer on the client side before sending it in the queue asynchronously...

ROS-20261022-73-0003

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0071

The vulnerability in the cache decoder functions of SCARDIOCTLREADCACHEA and SCARDIOCTLWRITECACHEA for the RDP client FreeRDP, related to the assignment of a null pointer, allows a malicious actor to trigger a service failure for the client application...

ROS-20261022-73-0023

The vulnerability in freerdp3 is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...

ROS-20261022-73-0101

The vulnerability in Grafana is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261022-73-0009

The vulnerability of the serialprocessirpdevicecontrol function in the channels/serial/client/serialmain.c file of the RDP client FreeRDP is related to an uncontrolled and exploitable flaw. Exploiting this vulnerability could allow a remote attacker to cause service failure...

ROS-20261022-73-0007

The vulnerability in freerdp3 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...

ROS-20261022-73-0021

The vulnerability in freerdp3 is related to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0011

The vulnerability in freerdp3 is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261022-73-0091

A vulnerability exists in the tsmfreadformattype function of the RDP client FreeRDP. This vulnerability relates to the reading of data beyond the allowed range during the analysis of AVC1 MPEG2VIDEOINFO format types with short ExtraData. This allows an attacker to cause a crash on the client side...

ROS-20261022-73-0083

Vulnerability in the ecamdevreadmediatype function of the RDP client FreeRDP: A division by zero occurs in the client before a reverse call to the HAL camera function is made, allowing an attacker to trigger a service failure on the client side...

ROS-20261022-73-0041

The vulnerability of the xslt/txNodeSorter component in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to compromise the...

ROS-20261022-73-0105

The vulnerability of the .NET software platform is related to the incorrect definition of symbolic links during access to files. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20261022-73-0044

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of an untrusted network policy file. Exploiting these vulnerabilities allows a malicious actor to compromise the integrity of protected information...

ROS-20261022-73-0073

A vulnerability exists in the tlsverifycertificate function when verifying the authenticity of RDP client FreeRDP certificates. This vulnerability arises due to incorrect certificate verification, allowing attackers to circumvent the TLS server’s authentication mechanisms...

ROS-20261022-73-0103

The vulnerability of the ASP.NET Core software platform is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

ROS-20261022-73-0093

The vulnerability in freerdp3 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...

ROS-20261022-73-0087

A vulnerability in the planardecompressplanerle function of the RDP client FreeRDP, related to reading beyond the allowed range, allows a malicious actor to cause a service failure on the client side when encountering an unmatched page...

ROS-20261022-73-0085

A vulnerability exists in the smartcardoperationfree function of the RDP client FreeRDP. This vulnerability is related to the assignment of a null pointer during the device control request cleanup process. This allows an attacker to trigger a service failure on the client side...

ROS-20261022-73-0066

The vulnerability of the Portainer container management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...